CodeGit
912cd596e0
actions/checkout@v4 needs a Node.js runtime, which the kaniko executor:debug image doesn't have and has no package manager to install it with (confirmed via a throwaway podman run - no git, no node, not even /etc/os-release). Fetch the repo as a tarball from Forgejo's archive endpoint instead, using wget/tar, which are actually present in the image. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Y4YNpuC2bgT224suQLLJ7B
50 lines
2.1 KiB
YAML
50 lines
2.1 KiB
YAML
name: build-hello-app
|
|
|
|
on:
|
|
push:
|
|
branches: [main]
|
|
paths:
|
|
- "apps/hello-app/src/**"
|
|
|
|
jobs:
|
|
build-and-push:
|
|
runs-on: docker
|
|
# kaniko builds the image itself with no daemon and no special host
|
|
# privileges, so the runner host only ever needs a rootless Podman
|
|
# socket to launch this container — never docker.sock, never sudo.
|
|
container:
|
|
image: gcr.io/kaniko-project/executor:debug
|
|
options: --entrypoint ""
|
|
steps:
|
|
# actions/checkout@v4 needs a Node.js runtime, which this minimal
|
|
# kaniko image doesn't have (no package manager to add it either) -
|
|
# fetch the repo as a plain tarball from Forgejo's archive endpoint
|
|
# instead, using the tools that are actually present (wget, tar).
|
|
- name: Checkout (manual - no git/node in this image)
|
|
run: |
|
|
wget --header="Authorization: token ${{ secrets.FORGEJO_TOKEN }}" \
|
|
-O /tmp/source.tar.gz \
|
|
"https://git.boglabob.com/${{ github.repository }}/archive/${{ github.sha }}.tar.gz"
|
|
tar -xzf /tmp/source.tar.gz --strip-components=1 -C "${{ github.workspace }}"
|
|
rm /tmp/source.tar.gz
|
|
|
|
- name: Write registry auth
|
|
run: |
|
|
mkdir -p /kaniko/.docker
|
|
AUTH=$(printf '%s:%s' "${{ vars.FORGEJO_USER }}" "${{ secrets.FORGEJO_TOKEN }}" | base64 -w0)
|
|
printf '{"auths":{"git.boglabob.com":{"auth":"%s"}}}' "$AUTH" > /kaniko/.docker/config.json
|
|
|
|
- name: Inject build info
|
|
run: |
|
|
SHORT_SHA="${GITHUB_SHA::7}"
|
|
BUILD_TIME=$(date -u +%Y-%m-%dT%H:%M:%SZ)
|
|
sed -i "s/__GIT_SHA__/$SHORT_SHA/; s/__BUILD_TIME__/$BUILD_TIME/" apps/hello-app/src/index.html
|
|
|
|
- name: Build and push
|
|
run: |
|
|
TAG="main-${GITHUB_SHA::7}-$(date +%s)"
|
|
/kaniko/executor \
|
|
--context="${{ github.workspace }}/apps/hello-app/src" \
|
|
--dockerfile="${{ github.workspace }}/apps/hello-app/src/Dockerfile" \
|
|
--destination="git.boglabob.com/${{ vars.FORGEJO_ORG }}/hello-app:$TAG" \
|
|
--destination="git.boglabob.com/${{ vars.FORGEJO_ORG }}/hello-app:latest"
|